2024-03-29 22:55:01 +01:00
|
|
|
name: Update flake.lock
|
|
|
|
|
|
|
|
|
|
# PREREQUISITES:
|
|
|
|
|
# - Generate ssh key: `ssh-keygen -t ed25519 -f snowflake`.
|
|
|
|
|
# - Add private key to https://git.caspervk.net/caspervk/nixos/settings/actions/secrets as SNOWFLAKE_SSH_PRIVATE_KEY.
|
|
|
|
|
# - Add public key to https://git.caspervk.net/caspervk/nixos/settings/keys with WRITE access.
|
|
|
|
|
# - Add public key to https://git.caspervk.net/caspervk/nixos-secrets/settings/keys with READ access.
|
|
|
|
|
|
|
|
|
|
on:
|
|
|
|
|
# https://forgejo.org/docs/latest/user/actions/#onschedule
|
|
|
|
|
schedule:
|
|
|
|
|
- cron: "23 17 * * 1"
|
|
|
|
|
|
|
|
|
|
jobs:
|
|
|
|
|
update:
|
|
|
|
|
runs-on: debian-latest
|
|
|
|
|
container:
|
|
|
|
|
image: docker.io/nixos/nix:2.21.0
|
|
|
|
|
steps:
|
|
|
|
|
- run: |
|
|
|
|
|
# Configure SSH
|
|
|
|
|
mkdir ~/.ssh/
|
2024-04-28 18:07:50 +02:00
|
|
|
echo "git.caspervk.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC4Kvx/lcFRvl7KlxqqhrJ32h3FzuzyLA5BNB42+p92c" > ~/.ssh/known_hosts
|
2024-03-29 22:55:01 +01:00
|
|
|
echo "${{ secrets.SNOWFLAKE_SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
|
|
|
|
|
chmod 0600 ~/.ssh/id_ed25519
|
|
|
|
|
|
|
|
|
|
# Checkout repository
|
|
|
|
|
git clone git@git.caspervk.net:caspervk/nixos.git
|
|
|
|
|
cd nixos/
|
|
|
|
|
|
|
|
|
|
# Update flake.lock
|
|
|
|
|
git config user.email "snowflake@caspervk.net"
|
|
|
|
|
git config user.name "snowflake"
|
|
|
|
|
nix --extra-experimental-features nix-command --extra-experimental-features flakes flake update --commit-lock-file
|
|
|
|
|
git push
|
|
|
|
|
|
